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Universal fault-tolerant quantum computation 
with only transversal gates and error correction 
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Transversal implementations of encoded unitary gates are highly desirable for fault-tolerant 
quantum computation. Though transversal gates alone cannot be computationally universal, they 
can be combined with specially distilled resource states in order to achieve universality. We show 
that "triorthogonal" stabilizer codes, introduced for state distillation by Bravyi and Haah [Phys. 
Rev. A 86 052329 (2012)], admit transversal implementation of the controUcd-controUed-Z gate. 
We then construct a universal set of fault-tolerant gates without state distillation by using only 
transversal controUed-controUed-Z, transversal Hadamard, and fault-tolerant error correction. We 
also adapt the distillation procedure of Bravyi and Haah to Toffoli gates, significantly improving on 
existing Toffoli distillation schemes. 



Quantum computers are highly susceptible to noise. 
For protection, the data can be stored in a code [1, 2], 
and encoded operations can be applied "fault-tolerantly," 
in order to prevent a single error from spreading to multi- 
ple qubits in a codeword [3]. Between operations, fault- 
tolerant error-correction keeps errors from accumulating. 
The simplest fault-tolerant operation is the application of 
physical gates transversally across the codewords, mean- 
ing that the jth gate is applied to the jth qubits of the 
codewords, for every j. Depending on the gate, this 
may or may not preserve the codespace and implement 
a valid encoded operation. Unfortunately, no quantum 
code admits transversal implementation of a universal 
set of encoded gates [4]. Instead, universality is usually 
achieved by combining some transversal gates with spe- 
cially prepared resource states in a process known as state 
injection and distillation [5]. State distillation can be or- 
ders of magnitude more costly than direct transversal 
gates, and dominates the resource overhead for imple- 
menting a quantum computer [6, 7]. 

Here we propose a way of implementing a universal 
set of quantum gates transversally, up to a correction 
that can be made by the standard error-correction proce- 
dure. Separate injection and distillation procedures are 
not required. The construction works only for the class 
of "triorthogonal" quantum stabilizer codes, introduced 
recently by Bravyi and Haah [8]. Therefore, implementing 
our construction directly may not reduce the overhead 
compared to using state distillation with more efficient 
codes that can tolerate higher noise rates. However, based 
on our construction, we derive a state-distillation proce- 
dure that, with realistic error parameters, reduces the 
overhead more than five-fold compared to previous state- 
of-the-art state distillation methods [9, 10]. 

Our construction is based on two main insights. First, 
we observe that the controlled-controlled-Z operation 
(defined by CCZ |a, 6, c) = (-1)'^'"= \a, b, c) for bits a, 6, c) 



can be implemented transversally for any triorthogonal 
quantum code. Second, we show that the Hadamard 
H — -75 ( 1 J^i ) can be implemented by transversal H 
gates followed by stabilizer measurements and Pauli X 
corrections. Together, H and CCZ are universal for quan- 
tum computation [11, 12]. 

As an example, consider the [[15, 7, 3]] quantum Ham- 
ming code, which uses 15 qubits to protect 7 encoded 
qubits to distance 3. The codespace is the simultaneous 
+1 eigenspace of the eight operators 



1 1 1 1 1 1 IXXXXXXXX, 
1 1 IXXXXI 1 1 IXXXX, 
I XXI I XXI IXXI I XX, 
XIXIXIXIXIXIXIX, 



1 1 1 1 1 1 IZZZZZZZZ, 
1 1 IZZZZI IIIZZZZ, 
IZZI IZZI IZZI IZZ, 
ZIZIZIZIZIZIZIZ, 



each the tensor product of Pauli operators /, X and Z . 
Choose a basis for this codespace so the logical X and 
Z operators on the first encoded qubit are transversal X 
and Z , respectively. Provided that the other six "gauge" 
qubits are prepared as encoded lO®), the CCZ operation 
is transversal. Moreover, transversal H gates preserve the 
codespace and apply a logical H to the first encoded qubit. 
Transversal H corrupts the gauge qubits, but they can be 
restored to 0^) by measuring the six corresponding logical 
Z operators and applying X corrections as necessary. 
Measurement of the gauge qubits' logical Z operators 
can be performed fault-tolerantly using standard error- 
correction techniques [3, 13]. 

In addition to allowing for universal quantum com- 
putation directly, our result also permits more efficient 
state injection and distillation when non-triorthogonal 
codes are used for computation. Traditional injection 
and distillation procedures are used for fault-tolerantly 
implementing the T = ( ?, i°/4 ) gate. Recently, Eastin [9] 
and Jones [10, 14] have shown that the cost of implement- 
ing a ToflFoli gate can be reduced by distilling so-called 
Toffoli states rather than using fault-tolerant T gates. We 
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The action of transversal CCZ on an encoded basis 
state a, b, c), for a,b,c £ {0, 1}, is therefore given by 



H - 



FIG. 1: The Toffoli gate is equivalent to a CCZ gate in which 
the target qubit is conjugated by Hadamard gates. 



observe that the distillation procedure of [8] for T gates 
can be adapted to Toffoli states in order to improve on 
the procedures of Eastin and Jones. 

STABILIZER CODES BASED ON 
TRIORTHOGONAL MATRICES 

Let us begin by specifying the construction of stabilizer 
codes based on triorthogonal matrices. For two binary 
vectors f,g G {0, 1}", let f-g € {0, 1}" be their entry-wise 
product, and let |/| denote the Hamming weight of /. Cah 
an m X n binary matrix G, with rows /i, . . • , /m G {0, 1}", 
"triorthogonal" if 

I/, • /,! = (mod 2) and |/, • f, • M = (mod 2) 

for all pairs {i,j) and triples {i,j,k) of distinct indices. 

An m X n triorthogonal matrix G can be used to con- 
struct an n-qubit, "triorthogonal," stabilizer code as fol- 
lows [8]. For each even- weight row of G, add a stabi- 
lizer by mapping non-zero entries to X operators, e.g., 
(1,0, 1) I— >■ X (g) / (g) X. Add a stabilizer for each row 
of the orthogonal complement G^ by similarly mapping 
non-zero entries to Z operators. The logical X and Z 
operators are then given by mapping non-zero entries of 
the odd-weight rows of G to X and Z, respectively. 

For example, fixing the six gauge qubits of the 15-qubit 
Hamming code to |0^) gives a [[15,1,3]] triorthogonal 
code [15]. Bravyi and Haah have constructed a [[49, 1,5]] 
and a family of [[3k + 8, k, 2]] triorthogonal codes [8]. 

TOFFOLI CONSTRUCTION 

We next construct a fault-tolerant Toffoli gate for a 
triorthogonal code. Shown in Fig. 1, the Toffoli gate is 
equivalent to a CCZ in which the target qubit is conju- 
gated by Hadamard gates. 

The main component of the construction is an imple- 
mentation of an encoded CCZ gate. We claim that for any 
triorthogonal code, transversal application of CCZ gates 
realizes CCZ gates on the encoded qubits. For simplicity 
consider the case of a triorthogonal code with a single en- 
coded qubit, i.e., based on a triorthogonal matrix G with 
a single odd- weight row, f^,. (The argument with multiple 
encoded qubits is fully analogous.) Let Go ^ {0, 1}" be 
the linear span of all the even-weight rows of G and let 
Qi be the coset {fi, + g ■ g G Go}- Then the encoding of 
|a), for a G {0, 1}, is given by the uniform superposition 
over Ga. I a) = -y== Egee^ Iff)- 



CCZ^"|a,6,c)= J2 CCZ^"|5,/i,i) 

g&ga,h€gtdega 



(1) 



Here g-h-i can be expanded as {afi,+g')-{bfi,+h')-{cfi,+i'), 
where g',h',i' G ^o- Expanding further gives one term 
abc{fi, •/*•/*) — abcf^,, plus other triple product terms in 
which fi, appears at most twice. Since G is triorthogonal, 
these other terms necessarily have even weight. The 
term abcf^, has odd weight if and only if a = 6 = c= 1. 
Substituting back into (1), as desired, 



CCZ* 



Ac)^{-ir''\a,b,c) 



(2) 



To complete the Toffoli construction, we also require a 
fault-tolerant implementation of the Hadamard H. For 
H to be transversal, the code must be self-dual, i.e.. 
Go = G^ . Unfortunately, no triorthogonal code is self- 
dual. Indeed, otherwise, since CCZ is transversal it would 
be possible obtain transversal implementation of Toffoli 
and H for the same code. However, Toffoli and H together 
are universal [11, 12], and it is known that universality 
cannot be achieved by transversal gates alone [4] (see 
also [16, 17]). 

Nonetheless, compact and fault-tolerant implementa- 
tions of logical H are still possible. When transversal H is 
performed on a triorthogonal code, the logical operators 
are transformed properly: logical X maps to logical Z 
and vice versa. A subset of the stabilizers is preserved: 
observe that Go ^ G-^ , and thus each element of Go corre- 
sponds to both X and Z stabilizers, which transversal H 
swaps. Transversal H does not preserve the Z stabilizers 
corresponding to G^ \Go^ so these must be restored by 
measuring and correcting them. In the [[15, 7, 3]] exam- 
ple above, this involved measuring the six gauge qubits' 
logical Z operators. 

The Z stabilizers of G^ \ Go can be restored during 
an X error-correction procedure. Stcanc's procedure, for 
example, involves a transversal CNOT from the data to 
an encoded ]+) ^ -75(10) + Jl)) "ancilla" state [13, 18]. 
The transversal CNOT implements encoded CNOT and 
has the effect of copying the unwanted X stabilizers onto 
the ancilla, and copying the desired Z stabilizers from the 
ancilla to the data. Transversal Z-basis measurements 
of the ancilla then permit correcting X errors on the 
data, while simultaneously restoring the stabilizer group. 
(Once again, in the [[15, 7, 3]] example, the ancilla's gauge 
qubits are prepared in 0^). Each is measured as or 1, 
with a correction required in the latter case.) See Fig. 2. 
Alternatively, Shor's error-correction procedure uses a 
separate GHZ state ^([00... 0) + jH-.-l)) for each 
stabilizer to be measured [3]. In either case, the required 



H 






i+> 



-e 



-^ 



^ 



-^ 



FIG. 2: An implementation of the logical Hadamard operation 
in a triorthogonal code. Transversal Hadamard gates are 
applied to the data block. In order to restore the data to the 
codespace, and also correct any X errors, an encoded |+) state 
is prepared, coupled to the data with transversal CNOT gates 
and measured. X corrections are applied as necessary. 



stabilizers can be measured and corrected using iJ, X, 
CNOT, |0) preparation and Z-basis measurements. By 
using CCZ gates to simulate CNOT and X, the entire 
Toffoli requires only H and CCZ gates. 

Importantly, even with additional X corrections to 
fix the Z stabilizers of G^ \ Go, the X error-correction 
procedure is fault tolerant. That is, k gate failures can 
lead to a data error of weight at most fc, for k less than 
half the code's distance d. Indeed, d is the minimum of 
the code's distance dz against Z errors (determined by 
the X stabilizers of Qq) and its distance dx against X 
errors (determined by the Z stabilizers of G^); and since 
Qq C G-*", dz < dx- Thus any X error of weight less 
than d/2 can be corrected using only the Z stabilizers 
of Go, and the Z stabilizers of G^ \ Qo can be corrected 
separately. 

DISCUSSION 

The simplest way to use the TofFoli construction above 
is with a concatenated triorthogonal code. A universal 
set of fault-tolerant operations can be constructed from 
only CCZ and H gates. Thus using triorthogonal codes 
for computation could be useful for circuits that contain 
large numbers of Toffoli gates. One could also imagine 
using multiple codes for computation by, for example, 
teleporting into the code best suited for each logical oper- 
ation. In this setting, a triorthogonal code could be used 
to implement efficiently the CCZ operation. 

Our construction allows for quantum computation to 
arbitrary accuracy, so long as the error rate per physi- 
cal gate is below a constant "threshold" value [19, 20]. 
Threshold error rates for triorthogonal codes are largely 
unknown, though estimates for the [[15,1,3]] code are 
roughly 0.01 percent per gate [21]. If the CCZ operation 
is constructed from a sequence of one- and two-qubit 
gates, then the threshold is likely lower. Toffoli- and 
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FIG. 3: A CGZ gate can be implemented by consuming a 
single Toffoli state [28]. The input qubits are teleported into 
the Toffoli state (enclosed by the dashed line) with Clifford 
corrections conditioned on the measurement outcomes. 



CCZ-type gates have been demonstrated in a number 
of experimental settings, with fidelities ranging from 68 
to 98 percent [22-25]. Since resource overhead increases 
rapidly as the physical noise rate approaches threshold, 
our construction is likely to be outperformed by schemes 
based on other codes, for which the threshold can be 
nearly one percent or higher (see, e.g., [6, 26, 27]). 

A more conventional way to achieve universality is 
through state injection and distillation. Bravyi and Haah 
have proposed distillation procedures using triorthogonal 
codes that permit fault-tolerant implementation of the 
T gate [8]. Our result implies that a similar procedure 
could be used implement Toffoli gates. 

The Toffoli state is defined by the output of the Toffoli 
gate on input ]+, +, 0), where the third qubit is the tar- 
get. A Toffoli state can be used to implement the CCZ 
gate as shown in Fig. 3. Distillation with an [[n, fc,(i]] 
triorthogonal code uses n transversal CCZ gates with 
error rate p to produce k Toffoli states with error rate 
0{p'^). See Fig. 4. The CCZ gates in the distillation 
circuit can be implemented recursively, or by using an 
existing Toffoli distillation procedure [9, 10, 14]. Note 
that the Hadamard gates are performed after decoding 
and thus the circuit in Fig. 2 is not required. For simplic- 
ity, Clifford operations including encoding and decoding 
operations are assumed to be perfect. 

The distillation procedure given by Fig. 4 can signif- 
icantly reduce the cost of implementing a Toffoli gate. 
Calculating the savings obtained by using triorthogonal 
codes instead of, or in combination with, existing Toffoli 
distillation procedures is somewhat involved, but can be 
illustrated with the following example used in [10]. Sup- 
pose we wish to implement a Toffoli gate with error below 
10~^^. The procedure of [10] consumes eight T gates with 
error p to produce a Toffoli state with error 0{p^). The T 
gates can be implemented using, for example, the method 
of [29] . If physical T gates can be performed with error 
at most 10~^, then using the Toffoli construction of [10], 
as given, requires on average 697.6 T gates. 

Alternatively, we could use a [[3fc-|-8, k, 2]] triorthogonal 
code for distillation at the top level, and use Toffoli states 
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FIG. 4: A Toffoli state distillation circuit using a triorthogonal 
code encoding k qubits. Three separate blocks are encoded into 
the state |+) and then transversal CCZ gates are applied. 
Conditioned on detecting no errors, each block is decoded 
and Hadamard gates are applied to each of the target qubits, 
yielding k TofToli states. 



from [10] as input to iniplement the CCZ gates in Fig. 4. 
In this way a single TofFoli state can be produced at an 
average cost of roughly three input Toffoli states distilled 
to 10~^. Each input Toffoli state now involves only 5.5-8 — 
44 T gates, yielding a more than five-fold total savings 
over the procedure due to [10] alone. 

Finally, wc note that if the orthogonality conditions 
on the matrix G are increased, then additional types of 
diagonal operations are transversal. If G satisfies the con- 
dition that all j-tuple products have weight (0 mod 2) 
for all 2 < j < h, then the /i-fold controUed-Z gate is 
transversal in the corresponding stabilizer code. This ob- 
servation is similar to a result of Landahl and Cesari, who 
demonstrated that codes satisfying increasingly stringent 
conditions on weights of the codewords admit transversal 
Z-axis rotations of increasing powers of 1/2*^ [30]. 
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